cat ~alan/6065081.pdf Don't take that example file out of RH though , its NDA and client/attorney priviledged. Trace looks like a buffer overrun but I may be wrong.
Created attachment 76645 [details] shorter test case, excerpted from the previous attachment
Fixed in CVS. The buffer would place a row in the wrong place, and an assertion would be triggered.
Does that mean we can downgrade it from security to "doh stupid bug" ?
I guess so.